Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft
File:                     A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json)
Hash identifier:          Qqm2kIc+T0uP+u/epVCn58P+wRzH1HcyB9c/3OZSfHk=
Subject key identifier:   C7:86:22:FD:AC:84:E3:18:EF:F2:A7:85:ED:97:AC:61:2B:42:F7:AF
Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
Certificate issuer:       /CN=A17DC55845B70106CEB3A498496454BE640F44AB
Certificate serial:       36A470E4C3213FA66EECC210A5D6E0C68674FD8D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft
Manifest number:          02D8
Signing time:             Thu 27 Mar 2025 20:41:09 +0000
Manifest this update:     Thu 27 Mar 2025 20:36:09 +0000
Manifest next update:     Sun 30 Mar 2025 21:49:09 +0000
Files and hashes:         1: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: ylugONOmd7q6N9wXo+eXH0B5lbMYeXDgYdqtpcdcXh8=)
                          2: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: lPotcf7YU+xOCDeuMjZ1tnsipDHrIbOt+27H0Jh76mQ=)
                          3: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: 8aTJRu9foQFYsb9vuOMv9v2Z6K/Xnx4JbU5S1Q47rNw=)
                          4: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: 04XRabDVfE4dREWxVqPX68ogqw6CjteNT+yHxPoaMWA=)
                          5: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: gB4EZJoHK905CwR/L43FWO/EADXfayVlG7nyunRWHhU=)
                          6: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 7M6efsLhqxjG1H0m8nrpYOTdTc1BnME2E5kel00NXYw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a4:70:e4:c3:21:3f:a6:6e:ec:c2:10:a5:d6:e0:c6:86:74:fd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB
        Validity
            Not Before: Mar 27 20:36:09 2025 GMT
            Not After : Mar 30 21:49:09 2025 GMT
        Subject: CN=C78622FDAC84E318EFF2A785ED97AC612B42F7AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:a4:7d:71:8f:14:0a:bd:23:57:a4:6e:41:
                    9f:e3:85:68:20:cb:02:d2:fd:09:24:b5:c1:18:32:
                    08:c0:79:a3:24:75:f3:73:4f:21:69:c8:2e:db:8a:
                    4b:1b:fe:60:f2:eb:2b:73:e8:29:78:d6:ca:f5:df:
                    6b:5d:45:1c:4f:6f:31:e7:81:87:58:37:6a:fb:74:
                    cb:a3:fe:f8:a3:48:51:03:3b:b5:64:f0:c6:60:c9:
                    b2:c1:27:33:2a:12:33:e4:5b:6c:24:a2:dd:a7:61:
                    16:9c:6a:af:c6:be:82:cc:95:99:1a:11:ba:30:c2:
                    25:03:05:41:06:dc:9b:03:62:e8:98:ef:d0:11:26:
                    f4:04:bf:83:de:e4:9e:2d:4b:e1:b2:71:2a:17:4c:
                    6e:0c:92:b7:25:7f:a7:2f:1e:48:f5:61:40:4e:e0:
                    97:07:a1:7f:76:9b:23:2e:f3:46:36:23:dc:3e:e7:
                    02:a1:16:1d:5f:73:fe:87:1d:82:6d:fe:55:e4:2f:
                    00:67:36:f1:d2:08:a3:c8:e7:02:9c:fb:0a:4b:82:
                    46:62:f4:e6:a9:91:19:c9:54:5a:17:b9:85:27:ad:
                    be:1a:2a:59:7b:12:ff:ab:a5:39:30:26:dc:d3:69:
                    c9:df:a3:43:cb:4e:af:65:af:9c:80:d3:f1:ce:85:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:22:FD:AC:84:E3:18:EF:F2:A7:85:ED:97:AC:61:2B:42:F7:AF
            X509v3 Authority Key Identifier:
                keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:32:58:9e:2e:47:3c:75:28:0d:ed:2a:90:49:d2:84:14:19:
         da:14:37:19:e7:2a:a4:aa:20:a1:dc:42:66:5a:fb:7b:ac:6e:
         5b:a8:ca:ce:a1:18:0a:89:ae:b7:fd:d0:71:42:cb:1b:23:9a:
         4c:ec:ee:b5:1c:2e:2e:df:12:c3:82:0b:93:fc:75:a4:17:40:
         da:70:94:9c:04:e1:56:74:ba:40:02:ca:be:08:ac:27:f0:19:
         d8:ba:5e:d1:c2:87:9c:b9:40:ab:18:1e:29:fc:a9:13:10:ff:
         59:36:dc:30:89:f9:7a:6e:cc:12:7a:b4:e3:82:c3:7a:71:e2:
         27:7d:af:57:89:01:5f:c5:25:10:eb:62:26:72:0c:ca:36:a7:
         c7:ae:00:45:e2:fd:eb:8d:21:41:e0:53:36:33:bd:31:45:2c:
         79:29:8e:96:47:e2:c4:93:34:94:31:66:6f:a1:80:6d:2d:f3:
         7a:dd:79:c0:34:f2:0b:84:30:f8:0d:e6:7e:06:8d:66:ac:b1:
         79:55:58:79:38:1f:ff:8c:47:df:24:ea:55:f1:a6:0e:10:2e:
         ed:e4:58:fa:91:b6:5f:92:b4:80:bb:a6:50:73:68:93:2d:35:
         e0:7a:5a:df:81:1c:f1:9f:5f:58:ad:9b:c4:cd:89:1a:31:68:
         ce:5a:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----